# Senior Security Operations Engineer at Pilotbase > Remote · United States · Senior · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Apilotbase%3A5474429008 (read 2026-11-09). ## Facts (observed) - Company: [Pilotbase](https://alderhq.app/companies/pilotbase) - Location text: Overland Park, Remote - United States; Overland Park; Remote - United States - Where it can be done from (inferred): Remote · United States (evidence: "Location: Overland Park, Remote - United States; Overland Park; Remote - United States") - Posted: 2026-11-05 (4 days ago) - First seen by alder: 2026-11-07 · last verified: 2026-11-08 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://job-boards.greenhouse.io/pilotbase/jobs/5474429008 ## Pay and sponsorship - Posted pay: not posted - Market band for similar posted roles (United States, n 266): p25 $165k, median $193k, p75 $220k ## Description (the employer's text) ### About Pilotbase Pilotbase is a connected system that brings together flight schools, pilots, and industry partners into a single, data-driven network. This next phase of growth is focused on expanding within our existing customer base, reaching pilots directly, and creating new revenue streams across the ecosystem. ### Job Overview As the Senior Security Operations Engineer, you will own the hands-on security functions of the team implementing controls, closing findings, running detection and response, and producing the evidence our compliance programs depend on. The Security Manager sets the standards, you make them real, and show that they hold. You will work across endpoints, cloud, identity, applications and vendor security, ranging from alert triage through to control design by researching options and proposing designs or tooling. ### Responsibilities The primary function is accountability for security outcomes in your domains being achieved and demonstrable. Where a control is claimed, you implement it, operate it, enforce its SLA, and evidence it. This role implements, operates, remediates and evidences. It also offers guidance and suggestions on proposing standards, policies, compliance frameworks and security tooling. As the team and the company scale, this role will grow to include additional related responsibilities. ### Remediation and Closure ● Owns closure of security findings end to end: triage, prioritisation against the standard, driving the remediation cycle against existing findings with platform owners, and verifying closure. Closure, not detection, is the deliverable. ● Manages, reviews and drives outcomes against penetration tests, vulnerability and posture scans, audit gaps, access reviews, and CVEs across the estate. ● Security is an overlay onto other domains, so where security does not own the platform you own the finding and its closure while holding the platform owner (IT, DevOps, Engineering, etc) to executing the fix. ### Functional Security ● Endpoint security direction and Tier 1 asset hardening. ● Vulnerability and application security scanning, and enforcement of its SLA. ● Cloud security posture management: stand up, then SLA enforcement. ● Data loss prevention: prevention and monitoring controls. ● Access control: least privilege, dual control, and other access validations. ● Network Security implementation at the cloud edge (alongside DevOps). ### Detection and Response ● Operates managed detection and response end to end, including day to day interactions with the provider. ● First responder for security events, carrying triage through to closure. ● External phishing investigation and prevention. ● Selection, implementation, and operation of a SIEM (when approved). ### Audit Evidence and Control Operation ● Produces and packages audit evidence for compliance frameworks (SOC 2 Type II, PCI DSS v4, etc) where automated collection cannot reach it. ● Runs the recurring access review cycles; mitigates, remediates, or otherwise drives corrections. ● Builds the controls that close audit gaps, and returns the evidence that shows they operate. ### Tooling, Design and Automation ● Researches, vets and recommends security tooling; owns day to day use once approved.● ● Drafts solution designs for new controls; implements on approval. ● Supports security architecture reviews for new services and integrations. ● Builds and maintains automation to remove recurring manual work from role scope. ### Also Supports ● Technical contact for the QSA, ASV and external auditor, including the quarterly external scan cycle. ● Security questionnaires (CAIQ, HECVAT, etc) answered from the evidence library, and upkeep of that library. ● Review of vendor security assessments. ● Security awareness training, including Internal phishing simulation campaigns and content recommended for approval. ### Qualifications ### REQUIRED Experience: 5+ years full time in an in-house security role, with hands-on ownership of controls in one or more of the domains above, and a track record of driving findings to verified closure. --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Apilotbase%3A5474429008 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.